Scanned pages/files
Request | Server response | Status |
http://www.kocaelitime.com/ | 200 OK Content-Length: 1191 Content-Type: text/html | suspicious |
Deface/Content modification. The following signature was found: Hacked by ...[549 bytes skipped]... khack.com",d="/cdn-cgi/cl/",e="img.gif",f=new a;f.src=[b,c,d,e].join("")})(Image)}catch(e){}//]]></script> <div align="center"> <p class="style8"><br> </br></br></br></br></br> <img alt="http://i.hizliresim.com/wzRyqO.png" src="http://i.hizliresim.com/wzRyqO.png"></p> </font><font face="Tahoma"><br> <br> Hacked by <b> Ka4p3 <br> <br> </font><font face="Tahoma"> Linux ns1.linedc.com 2.6.32-431.20.5.el6.x86_64 #1 SMP Fri Jul 25 08:34:44 UTC 2014 x86_64</font></p> </font><font face="Tahoma"><br> <span class="style3"> </span></p> </div> </body> </html> </body> </script> <a id="iframe"></a> <embed src="https://youtube.g ...[201 bytes skipped]... | ||
http://www.kocaelitime.com/test404page.js | 200 OK Content-Length: 1191 Content-Type: text/html | clean |
Malicious Redirects
First query (normal visit):
GET / HTTP/1.1
Host: kocaelitime.com
Result:
GET / HTTP/1.1
Host: kocaelitime.com
Result:
Second query (visit from search engine):
GET / HTTP/1.1
Host: kocaelitime.com
Referer: http://www.google.com/search?q=kocaelitime.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
GET / HTTP/1.1
Host: kocaelitime.com
Referer: http://www.google.com/search?q=kocaelitime.com
Result:
The result is similar to the first query. There are no suspicious redirects found.
Safe Browsing / Blacklists
Query: http://www.google.com/safebrowsing/diagnostic?site=kocaelitime.com
Result: This site is not currently listed as suspicious.
Result: This site is not currently listed as suspicious.
Query: http://yandex.com/infected?l10n=en&url=http://kocaelitime.com/
Result: kocaelitime.com is not infected or malware details are not published yet.
Result: kocaelitime.com is not infected or malware details are not published yet.